As if PHP2Shell wasn't enough for one day... now GitLab. 😅 🚨 CRITICAL GITLAB ALERT (CVSS 10.0) CVE-2026-110264 could allow unauthenticated RCE on self-managed GitLab servers. ⚠️ Potentially affects 12 years of releases, dating back to 2014. Patches available. Update immediately! docs.gitlab.com/releases/pat… #gitlab #cybersecurity

EA is shutting down BioWare, the studio behind Dragon's Age and Mass Effect The next Mass Effect game has been canceled Source: @jasonschreier

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

How on earth did this happen: The Indian certificate authority (CA) eMudhra had one job (well, two): 1. Create secure, 384-bit private keys 2. Store these securely and do not leak them Well, eMudhra chose private keys between 1 and 256 (the numbers!!) and called it a day. WTF